Gaatu PRIVACY Notice
Last Updated [August 18, 2023]
Welcome to Gaatu.com. (“Gaatu“, “we“, “us“, or “our“). Your privacy is very important to us. This Privacy Notice explains how we collect, disclose, use, share and otherwise process Personal Data (defined below) when you use our website (the “Site“) and all related services provided by Gaatu (collectively, the “Services” or “Product”), and your choices concerning our data practices.
“You” or “your“, as used in this Privacy Notice, refers to the individual to whom Personal Data relates. By using Gaatu, you agree to the policies and procedures set forth in this Privacy Notice. You should review this Privacy Notice to understand our practices pertaining to personally identifiable information. Please read this Privacy Notice before using our Services or submitting any Personal Data to Gaatu and contact us at [email protected] if you have any questions.
What Personal Data do we collect?
In the course of its business activities and providing the Services, Gaatu may need to process Personal Data. Without your Personal Data, we will not be able to provide you with the requested Services. As a rule, the Personal Data that you provide directly or indirectly to Gaatu when using our services and visiting our Websites are:
- Contact information. This may include your name, address, email address and phone number;
- Account information. This may include log-in details, including your email address, and other information provided through your account;
- User and preference information. This may include shipping amounts, history of purchases and related commercial activities;
- Automatically generated information. This will include IP address, unique device or user ID, system and browser type, date and time stamps, referring website address, content and pages you accessed on our Site, dates, times and locations actions take place, websites you visit (if you connect to our in-store wireless services).
In addition to the above categories of Personal Data, depending on your interaction with Gaatu, we may collect other types of information which may or may not contain Personal Data. Such information related to shipments and services may include shipment tracking number, shipment routing information, location data, status of a shipment, delivery location, packaging type, number of pieces, weight, picture of the parcel, and customs information.
How do we collect Personal Data?
Gaatu collects Personal Data directly from you when you sign up for an account with us and provide us with your information.
Gaatu also collects Personal Data directly from Marketplaces, such as Amazon.com, eBay.com, Walmart.com, for the purpose of fulfillment, and sales tax reporting purposes, for Gaatu and its customers, through the use of marketplaces’ APIs.
We may also receive Personal Data about you if it is provided to us by an account holder, for example if the account holder provides us with the name, address and phone number of the recipient of a shipment. When we receive Personal Data indirectly in this way, we rely on the provider of the Personal Data for the accuracy of the information and that the provider has the authority to provide that information to Gaatu.
How do we use your Personal Data?
We may use the information we obtain to provide you with Services that you have requested, such as logistics, warehousing, sales tax reporting, and shipping activities. We may also use the information to provide you with customer support; send you tracking updates from our business partners such as UPS and USPS, Fedex, DHL etc; to provide you with offers and promotions that may be relevant to you; to operate, evaluate and improve our business; and to comply with applicable legal requirements and our policies. We store the data on our production servers, staging servers, located in US, for the purposes of providing services to you. All production servers and staging servers are protected by firewall rules, and security measures. The usage of staging server is part of the engineering Standard Operating Procedure with regard to production code roll out, and verification process.
We do not sell customer or mailing lists to outside parties, including marketers.
For more information about our partners’ privacy practices, please see their privacy websites at https://www.ups.com/us/en/help-center/legal-terms-conditions/privacy-notice.page and https://about.usps.com/who/legal/privacy-policy/, https://www.fedex.com/en-us/trust-center/privacy.html
In addition, we use information collected online through cookies, web beacons and other automated means for purposes such as (i) customizing our users’ visits to our Site, (ii) delivering content (including advertising) tailored to your interests, and (iii) managing our business. We also use this information to help diagnose technical and service problems, administer our Site, identify users of our Site, and gather demographic information about our users. Our Site is not designed to respond to “do not track” requests from browsers.
How long will we keep your Personal Data?
We will retain your Personal Data no longer than necessary for the purpose such as (i) Shipping (ii) Tax for which we process your Personal Data. After the retention period we will delete or anonymize your Personal Data, unless we need to retain certain for another purpose. We will only do so if we have a legal ground to retain your Personal Data. We will also ensure that Personal Data are only accessible for that other purpose.
Do we share your Personal Data with anyone?
Gaatu shares your Personal Data with third parties in the following circumstances:
- With its affiliates, operating groups, subsidiaries and divisions, or with third parties if such is necessary for the purposes as listed above.
- With data processors, i.e., parties such as vendors or service providers processing Personal Data on our behalf, such as UPS and USPS. In such cases, these third parties only use your Personal Data for the purposes described above and only in accordance with our instructions. Gaatu will only use processors which provide sufficient guarantees to implement appropriate technical and organizational measures and ensure the protection of the rights of data subjects.
- With its employees if and to the extent necessary for the performance of their tasks. In such a case, access will be granted only if and to the extent necessary for the purposes described above and only if the employee is bound by confidentiality.
- If and when required to do so by law, court order, or other legal process, for example, with law enforcement agencies or other governmental agencies, to establish or exercise our legal rights or in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
Please note that Gaatu is based in the United States. If you are accessing the Site from a country outside the United States, your Personal Data may be transferred from your current location to the offices and servers of Gaatu and its authorized third-party business vendors located globally, including in the United States. These countries may have data protection laws less stringent than or otherwise different from the laws in effect in the country in which you are located.
How do we protect your Personal Data?
Gaatu maintains appropriate technical and organizational measures to protect your Personal Data against accidental or unlawful processing, including protecting your Personal Data against unauthorized access, maintaining the confidentiality, integrity and availability of your Personal data, and training personnel on information security requirements.
However, no security measure can guarantee against compromise. You also have an important role in protecting your Personal Data. You should not share your username and password with anyone, and you should not re-use passwords across more than one website. If you have a reason to believe that your Personal Data has been compromised, please contact us as detailed below.
What if I am a California resident?
If you reside in California, we are required to provide additional information to you about how we use and disclose your information, and you may have additional rights with regard to how we use your information. We have included this California-specific information below.
Consistent with the “What Personal Data do we collect and how do we use it?” section above, we collect certain categories and specific pieces of information about individuals that are considered “Personal Information” in California. As detailed above, we may collect this Personal Information from you and other third parties. We collect, share and disclose Personal Information for the business and commercial purposes described in the “Why do we collect Personal Data?” and “Do we share your Personal Data with anyone?” sections above.
We do not “sell” your Personal Information, as this term is defined under California law.
Our Site does not respond to Do Not Track requests from web browsers.
Subject to certain exceptions, as a California consumer, you have the right to: (i) access your Personal Information and (ii) obtain deletion of your Personal Information. To the extent permitted by applicable law, we may be required to retain some of your Personal Information, and certain Personal Information is strictly necessary in order for us to fulfill the purposes described in this Privacy Notice.
Should you wish to request the exercise of your other rights as detailed above with regard to your Personal Information, we will not discriminate against you by offering you different pricing, products or services, or by providing you with a different level or quality of products or services, based solely upon this request. Please contact us as described above to exercise such rights.
If you are a California consumer and you wish to exercise your rights as outlined in this section, you may need to provide information such as name and e-mail so that we can verify your identity. We will use the information you provide when exercising your rights for no other purpose other than to verify your identity.
You also have the option of designating an authorized agent to exercise your rights on your behalf. For authorized agents submitting requests on behalf of California residents, please contact us as described above, with any evidence you have that you have been authorized by a California consumer to submit a request on their behalf.
Our Service does not knowingly collect or solicit any information from anyone under the age of consent established by the data protection law of their applicable country. In the event that we learn that we have collected Personal Data from anyone under the age of consent established by the data protection law of their applicable country, we will take all reasonable steps to erase such information as quickly as possible. If you believe that we may possess any information provided by or pertaining to a child, please contact us at [email protected] and we will endeavor to delete that information from our databases.
Updates to this Privacy Notice
Gaatu may update this Privacy Notice from time to time. Gaatu will publish an up-to-date Privacy Notice on the Websites at all times indicating the latest amendments.
How to contact us
If you have any questions about this Privacy Notice, or if you would like us to update information we have about you or your preferences, please contact us at [email protected]